added authentication of anonymous users on certain public web services
using _json_response in all relevant places to catch ZW0000